Tree: 914e8da4e5

ai/coverage-unknowns

ai/gate3-published-rc7-acceptance

ai/release-5.0.0-rc6

ai/test-coverage-assessment

master

test/transfer

4.2.6

4.2.4

4.2.3

5.0.0-rc7

5.0.0-rc6

5.0.0-rc5

5.0.0-rc4

5.0.0-rc3

5.0.0-rc2

5.0.0-rc1

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from '914e8da4e5'

${ noResults }

Commit Graph

2 Commits (914e8da4e593930f3e2d80d6fe079d0978732f90)

Author	SHA1	Message	Date
Raimund Andree	0947683372	fix: address the review of 5.0.0-rc3 - Set-NTFSSecurityDescriptor -Verbose names the sections that it writes, or says that it writes nothing for an unchanged descriptor; its page says "since it was read or last written" (review F-02). - The pages of Enable-NTFSAccessInheritance, Disable-NTFSAccessInheritance, and Set-NTFSInheritance get the #34 note, like the other fixed cmdlets (review F-06). - Set-TestOwner throws its own error when icacls fails, also when the caller uses -ErrorAction Stop in Windows PowerShell (review F-07). Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: AI Assistant <ai@example.com>	6 days ago
Raimund Andree	0b92b69d53	fix: write only the sections of the security descriptor that a cmdlet changes The access and audit cmdlets wrote the owner of an item back with the entries they changed. For a DACL without the auto-inherit flag, Windows returns the owner and the group even when only the DACL is read, and the cmdlets wrote every section that the descriptor held. Without the Restore privilege, or on a file server that refuses the owner, the write failed with error 1307 (#34). - Add-NTFSAccess, Clear-NTFSAccess, Add-NTFSAudit, and Clear-NTFSAudit read only the DACL or the SACL. FileSystemSecurity2.Write(), Remove-NTFSAccess, and Remove-NTFSAudit write only the sections they read, which also fixes the access inheritance cmdlets. - Read together with the SACL, the inherited entries of such a DACL lose their inherited flag when the parent folder has no SACL, and the cmdlets stored them as explicit copies. Get-NTFSSecurityDescriptor now reads the DACL in a separate call. - Set-NTFSSecurityDescriptor writes only the sections that changed since they were read; an unchanged descriptor writes nothing (maintainer decision of 2026-10-06). - Clear-NTFSAudit writes nothing for an item without a SACL, and reports an error without the Security privilege (maintainer decision). The regression tests failed before and pass after the fix in Windows PowerShell 5.1 and PowerShell 7, elevated and as a basic user. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Co-authored-by: AI Assistant <ai@example.com>	6 days ago